Prompt file imported from cvsz/z-platform (.codex/prompts/zeaz-platform-scan-fix/06-security-secret-scan.prompt.md). Copyright stays with the author.

ZEAZ Security and Secret Hygiene Scan

Name: 06-security-secret-scan
Author: cvsz

Language and Coding Standards

Communication: Always talk in Thai when interacting with users.
Code & Technical Assets: All code, comments, documentation, and technical definitions must be in English.

Goal: Detect accidental sensitive files or risky tracked changes before commit/push.

Do not print secret values. Do not open secret files unless only checking filename/path metadata. Do not commit secrets.

Scan:

.env
.env.*
secrets/
secret/
credentials/
token/
tokens/
*.pem
*.key
*.p12
*.pfx
*.tfvars
*.tfstate
creds.json
credentials.json
.wrangler/
.cloudflared/
.kube/
.ssh/
.gnupg/

Use:

git status --short
git ls-files
git diff --name-only
git diff --cached --name-only

If risky files are untracked:

leave them untracked
add safe ignore rules if appropriate

If risky files are tracked:

report path only
recommend rotation if real secret was committed
do not display secret contents

Output:

Safe/unsafe file list by path only
Recommended gitignore patch
No secret values

# ZEAZ Security and Secret Hygiene Scan ## Language and Coding Standards - **Communication**: Always talk in Thai when interacting with users. - **Code & Technical Assets**: All code, comments, documentation, and technical definitions must be in English. Goal: Detect accidental sensitive files or risky tracked changes before commit/push. Do not print secret values. Do not open secret files unless only checking filename/path metadata. Do not commit secrets. Scan: - .env - .env.* - secrets/ - secret/ - credentials/ - token/ - tokens/ - *.pem - *.key - *.p12 - *.pfx - *.tfvars - *.tfstate - creds.json - credentials.json - .wrangler/ - .cloudflared/ - .kube/ - .ssh/ - .gnupg/ Use: - git status --short - git ls-files - git diff --name-only - git diff --cached --name-only If risky files are untracked: - leave them untracked - add safe ignore rules if appropriate If risky files are tracked: - report path only - recommend rotation if real secret was committed - do not display secret contents Output: - Safe/unsafe file list by path only - Recommended gitignore patch - No secret values

{ "prompt": "# ZEAZ Security and Secret Hygiene Scan\n\n## Language and Coding Standards\n- **Communication**: Always talk in Thai when interacting with users.\n- **Code & Technical Assets**: All code, comments, documentation, and technical definitions must be in English.\n\nGoal:\nDetect accidental sensitive files or risky tracked changes before commit/push.\n\nDo not print secret values.\nDo not open secret files unless only checking filename/path metadata.\nDo not commit secrets.\n\nScan:\n- .env\n- .env.*\n- secrets/\n- secret/\n- credentials/\n- token/\n- tokens/\n- *.pem\n- *.key\n- *.p12\n- *.pfx\n- *.tfvars\n- *.tfstate\n- creds.json\n- credentials.json\n- .wrangler/\n- .cloudflared/\n- .kube/\n- .ssh/\n- .gnupg/\n\nUse:\n- git status --short\n- git ls-files\n- git diff --name-only\n- git diff --cached --name-only\n\nIf risky files are untracked:\n- leave them untracked\n- add safe ignore rules if appropriate\n\nIf risky files are tracked:\n- report path only\n- recommend rotation if real secret was committed\n- do not display secret contents\n\nOutput:\n- Safe/unsafe file list by path only\n- Recommended gitignore patch\n- No secret values", "variables": [], "notes": "Goal: Detect accidental sensitive files or risky tracked changes before commit/push.", "metadata": { "source": { "provider": "github-codex-prompts", "repository": "https://github.com/cvsz/z-platform", "path": ".codex/prompts/zeaz-platform-scan-fix/06-security-secret-scan.prompt.md", "ref": "f32aebdf1a1a69615dd18673dfe28f90767b1ba7", "url": "https://github.com/cvsz/z-platform/blob/f32aebdf1a1a69615dd18673dfe28f90767b1ba7/.codex/prompts/zeaz-platform-scan-fix/06-security-secret-scan.prompt.md", "key": "cvsz/z-platform/.codex/prompts/zeaz-platform-scan-fix/06-security-secret-scan.prompt.md" } } }

06-security-secret-scan

About

ZEAZ Security and Secret Hygiene Scan

Language and Coding Standards

Use it

Manifest

Reviews